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Listing of Claims: 



Claim 9 (newly 
identification of 
containing: 

a) 

b) 



Claim 1 (previously amended) A system for controlling access to information items comprising: 

a) a storage subsystem containing definitions of customer groups, customer information 
including which customer group or groups to which each customer belongs, 
information item definitions including which customer group or groups with each 
i ^formation item associated, a set of group source keys, each group source key being 
associated with a different one of the customer groups, a set of group member keys, 
tach group memberbeing associated within a different one of said group source keys; 

b) s n encryption subsystem for encrypting information items associated with a customer 
I ;roup using the group source key associated with the same group; and 

c) 2n authentication subsystem for allowing a customer access to a group member key 
once the customer has been authenticated as a member of the customer group with 
which the group member key is associated, thereby enabling the customer to use the 
&ovp member key to decrypt item information previously encrypted using the 
associated group source key. 

Claims 2-8 Cancelled 



added) A controlled access catalog in a computer readable memory for storing 
catalog items accessible by members of authorized groups, said catalog 



identification of an authorized group; 

identification of selected catalog items and group information for said authorized 
jjroup, and a private key of said authorized group for encrypting said group 
information; 

public key for said authorized group for decrypting encrypted group information, 
\aid public key corresponding respectively to said private key of said authorized 
up; and 
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d) 



authentication means for granting access to said public key of said authorized 
% roup for decrypting said encrypted group information for 
nembers of said authorized group. 



Claim 1 0 (newly added) A controlled access catalog in a computer readable memory for storing 
identification of catalog items accessible by members of authorized groups, said catalog 



containing: 
a) 
b) 



c) 



i ientification of said authorized groups; 

identification of selected catalog items and group information for each 
futhorized group, and a private key of said each authorized group for encrypting 
said group information; 

t public key for each said authorized group for decrypting encrypted 
\ ;roup information, each said public key corresponding respectively to 
£ private key of each said authorized group and; 

authentication means for granting access to said public key of each said authorized 
lor respectively decrypting encrypted group information of each said authorized 
tpoup for its members- 



Claim 1 1 (newly added) The catalog of claim 9 wherein said authentication means is responsive 
to receiving menber identification for granting access to said public key of said authorized 
group. 

Claim 12 (newly added) The catalog of claim 9 wherein said group information includes group 
pricing. 



Claim 13 (newly 
decrypting 
by an 



added) The catalog of claim 12 further comprising decryption means for 
encrypted group pricing using said public key when pricing information is requested 
authenticated member of said authorized group. 
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Claim 14 (newly 
members of said 



Claim 15 (newty added) 
a) 
b) 



Claim 16(newty 
claim 15 at a 



added) The catalog of claim 13 further comprising identification of said 
authorized group. 



The catalog of claim 14 further comprising: 
encryption means for encrypting said group pricing by using said private key; and 
access means for accessing said encrypted group pricing of said authorized group 
b y said members, said access means being responsive to a member providing 
identification and authentication data for confirming authorization of said member 
t:> access said encrypted group pricing. 



added) A multimodal information-handling network including said catalog of 
node of said network. 



fust 



Claim 17 (newly added) User interface means at a second node of said network of claim 16, said 
user interface no cans comprising: 

a) ipput means for accepting member input, including member identification and 
Authentication data; 

b) <»mmunication means for sending said member input from said second node to 
s aid catalog over said network. 



Claim 18 
means is adapted 
catalog items 
means to displaiy, 



(newl^ added) The user interface means of claim 1 7 wherein said communication 
to receive information output from said catalog including identification of 
decrypted group pricing, and said interface means comprises presentation 
\ for a user, identification and pricing of said catalog items. 



Claim 19 (newly added) The user interface of claim 17 wherein said presentation means is 
adapted to present to a user: 

a) in input screen having an input field for said user to enter a query including 
member identification and authentication data to be sent to said catalog by said 
communication means to request access to said catalog; and 

b) 4 user presentation screen to display information including decrypted pricing of 
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catalog items available to said user after access to said catalog has been 
c ommunicated to said communication means. 



Claim 20 (newly 
readable memoiy 
groups, compris ing: 

a) 

b) 



c) 
<1> 



c) 



Claim 21 (newly 
to receiving 
group. 



Claim 23 (newly 
pricing using said 
of said authorized 



added) A method for managing a controlled access catalog in a computer 
for storing identification of catalog items accessible by members of authorized 



storing identification of an authorized group; 

storing identification of selected catalog items and group information for said 
authorized group; 

encrypting said group information with a private key of said authorized group; 
storing a public key for said authorized group for decrypting encrypted group 
information, said public key corresponding to said private key of said authorized 
£;roup; and 

authenticating and granting access to said public key of said authorized group for 
decrypting said encrypted group information for members of said authorized 



I [roup. 



added) The method of claim 19 wherein the step of authenticating is responsive 
mejnbcr identification, for granting access to said public key of said authorized 



Claim 22 (newfy added) The method of claim 19 wherein said group information includes group 
pricing. 



added) The method of claim 22 further comprising decrypting encrypted group 
public key when pricing information is requested by an authenticated member 
group. 



Claim 24 (newly added) The method of claim 23 farther comprising storing identification of said 
members of saw authorized group. 
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Claim 25 (newly added) The method of claim 24 further comprising: 

a) encrypting said group pricing of an authorized group by using said private key of 
said authorized group; and 

b) f roviding access to said encrypted group pricing of said authorized group, 
rpsponsive to a user providing identification and authentication data for 
confirming authorization of said member to access said encrypted group pricing. 

Claim 26 (newly added) A program product having a computer-readable medium storing 
computer-readable program code for managing a controlled access catalog in a computer 
readable memoty accessible by members of authorized groups, said program code comprising: 

a) computer-readable program code for causing said computer to store identification 
c f an authorized group; 

b) computer-readable program code for causing said computer to store identification 
c f selected catalog items and group information for said authorized group; 

c) computer-readable program code for causing said computer to encrypt said group 
information with a private key of said authorized group; 

d) cjomputer-rcadable program code for causing said computer to store a public key 
for said authorized group for decrypting encrypted group information, said public 
Vey corresponding respectively to said private key of said authorized group; and 

e) computer-readable program code for causing said computer to authenticate and 
£ ;rant access to said public key of said authorized group for decrypting said 
encrypted group information for a member of said authorized group. 



Claim 27 (newly 
causing said 



added) The product of 26 wherein the computer-readable program code tor 
computer to authenticate is responsive to receiving member identification. 



Claim 28 (newly added) The product claim 26 wherein said group information includes group 
pricing. 

i 

i 

Claim 29 (newljf added) The product of claim 28 further comprising computer-readable program 
code for causing said computer to decrypt encrypted group pricing using said public key when 
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pricing informa ion is requested by an authenticated member of said authorized group. 



Claim 30 (newlV added) 
code for causing 



The product of claim 29 further comprising computer-readable program 
said computer to store identification of said members of said authorized group- 



Claim 3 1 (newly added) The product of claim 30 further comprising computer-readable program 
code for causing said computer to access said encrypted group pricing of said authorized group 
by said members, responsive to a member providing identification and authentication data tor 
confirming authorization of said member to access said encrypted group pricing. 
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